v0.45.0

[github-actions[bot]]

This minor release adds alpha drift detection and remediation APIs, new localization and automerge controls, notification improvements, and several provider and execution fixes.

Highlights

• Added alpha drift detection, status, remediation, remediation history, and drift webhook APIs. These APIs are alpha and their request/response behavior may change in future releases. (feat(api): add alpha drift detection and remediation APIs #6360)
• Added runtime localization support with built-in English and Spanish catalogs plus custom YAML overrides. (feat: Refactor localization to YAML catalogs with runtime language overrides #6506)
• Added automerge controls for default merge method and disabling automerge labels. (feat: Add a possibility to define a default merge method #6573, feat: add --disable-automerge-label flag #6593)
• Improved GitHub team allowlists to honor team hierarchy. (feat(github): support team hierarchy in GH_TEAM_ALLOWLIST #6365)

Alpha: Drift detection and remediation APIs

• Added alpha drift detection APIs, drift status API, drift remediation API, and remediation history/result read endpoints. (feat(api): add alpha drift detection and remediation APIs #6360)
• Added drift webhook notifications, including Slack and HTTP webhook support. (feat(api): add alpha drift detection and remediation APIs #6360)
• Added --enable-drift-detection for drift detection/status/history behavior.
• Added --enable-drift-remediation for destructive remediation apply.
• Drift APIs require API authentication with X-Atlantis-Token and repository allowlist authorization.
• Remediation action:"apply" requires cached positive drift with has_drift:true for the same repo/ref/base branch/project/path/workspace.
• Drift API inputs include ref, path, workspace, repository, and allowlist safety validation.
• Operators should test carefully before production use, especially with hooks, policy checks, allowlists, multi-project repos, and custom workflows.

Features

• Added --language and --language-config-file to localize Atlantis pull request comments and override language catalog strings. (feat: Refactor localization to YAML catalogs with runtime language overrides #6506)
• Added --automerge-method to set a default merge method for automerging, currently implemented for GitHub. (feat: Add a possibility to define a default merge method #6573)
• Added --disable-automerge-label to disable automerge label behavior. (feat: add --disable-automerge-label flag #6593)
• Extended autodiscover.ignore_paths to targeted -d commands. (feat: extend autodiscover.ignore_paths to targeted -d commands #6466)
• Streamed project failure text to the job page. (feat: stream project failure text to job page #6414)

Fixes

• Scoped regex project plans correctly when --restrict-file-list is enabled. (fix: scope regex project plans with restrict file list #6598)
• Detected OpenTofu versions using the project distribution. (fix: detect OpenTofu versions with project distribution #6597)
• Re-downloaded Terraform/OpenTofu binaries when the existing binary appears invalid. (feat: Re-download terraform binary if it appears to be invalid. #6454)
• Unified Terraform/Terragrunt project directory detection, including .tf, .tf.json, and terragrunt.hcl indicators. (chore: Unify determination of a terraform project directory #6455)
• Hardened path handling for CWE-22 path-expression issues. (fix: resolve CWE-22 uncontrolled data used in path expression vulnerabilities #6254)
• Preserved Docker healthcheck port fallback behavior. (fix(docker): preserve healthcheck port fallback #6588)
• Clarified status-update logging when no URL is available. (fix: clarify update status log when URL is empty #6595)

Provider fixes

• Bitbucket Cloud: validate pagination next URLs before following them. (fix(bitbucket): validate pagination next URLs #6260)
• GitHub: only apply GitHub App checkout behavior to GitHub repositories. (fix: check for githubApp should only affect GitHub repos #6119)
• GitHub: support child-team inheritance for GH_TEAM_ALLOWLIST. (feat(github): support team hierarchy in GH_TEAM_ALLOWLIST #6365)

Notifications and webhooks

• Slack notifications now show the pull request head branch instead of the base branch. (fix: show PR head branch instead of base branch in Slack notifications #6316)
• Slack notifications can include the pull request description. (feat: include pull request description in slack notifications #6540)
• Documentation now clarifies Slack payload fields and GitHub team hierarchy behavior. (docs: clarify recent merged feature follow-ups #6596)

New Contributors

• @hussein-mimi made their first contribution in feat(github): support team hierarchy in GH_TEAM_ALLOWLIST #6365
• @JFryy made their first contribution in chore(deps): migrate off of archived gopkg.in/yaml.v3 #6072
• @ronaldmiranda made their first contribution in feat: Add a possibility to define a default merge method #6573
• @emanuelbesliu made their first contribution in feat: extend autodiscover.ignore_paths to targeted -d commands #6466
• @rym-dd made their first contribution in feat: include pull request description in slack notifications #6540
• @eamonryan made their first contribution in feat: stream project failure text to job page #6414
• @kiwibel made their first contribution in fix: show PR head branch instead of base branch in Slack notifications #6316
• @zonorti made their first contribution in fix: check for githubApp should only affect GitHub repos #6119

Full Changelog: v0.44.1...v0.45.0

---

This discussion was created from the release v0.45.0.